This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json) Hash identifier: 63O0BRp9IOyusaS8lFe5OYp5/HjKoeaYQyT0AnRq/k8= Subject key identifier: CF:DF:A2:B3:84:94:24:D6:8A:04:A6:AE:E3:87:AF:34:6A:C5:A6:38 Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928 Certificate serial: 019B5A1A7671430AD234F3414693C028BD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft Manifest number: 14B0 Signing time: Fri 26 Dec 2025 10:00:42 +0000 Manifest this update: Fri 26 Dec 2025 10:00:42 +0000 Manifest next update: Sat 27 Dec 2025 10:00:42 +0000 Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: c4a9dfr1BGToONmGXZNJb+rEAR+p4LGIvSpwMIOK++U=) 2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=) 3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:76:71:43:0a:d2:34:f3:41:46:93:c0:28:bd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928 Validity Not Before: Dec 26 10:00:42 2025 GMT Not After : Dec 27 10:00:42 2025 GMT Subject: CN=cfdfa2b3849424d68a04a6aee387af346ac5a638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:3a:dc:10:5b:cf:12:35:0e:4c:dd:31:ae: 3c:a7:c6:16:d0:e6:5a:dd:b0:b0:2f:e2:b9:e5:55: 1e:5a:b1:fc:ad:d8:2b:9b:c3:56:0a:37:22:fa:a1: e8:66:4e:d7:aa:96:0f:5a:54:5b:6b:6e:b4:34:08: 1f:31:c2:85:11:39:3f:24:df:77:9e:55:2b:97:71: 1b:ef:b8:27:02:e2:bd:61:18:e0:53:5e:7a:cb:43: 10:ac:74:9b:81:e9:b1:a0:e0:28:f6:23:cf:ca:f4: 95:cf:ef:66:ed:3f:47:1e:2b:e1:2e:35:28:61:e7: 6b:11:c7:98:42:d6:30:0f:fa:56:79:b0:84:99:b2: 84:13:ae:3d:b9:9a:bd:d3:17:84:8b:72:71:c1:bd: dd:13:3d:c7:7e:13:a7:65:4e:49:8d:10:63:c5:4b: 09:bb:1d:bf:61:34:ca:8c:29:21:76:ab:3a:9d:7e: 5a:6c:5c:d0:1c:1b:bf:7b:92:c2:f5:4f:10:66:8e: cf:0e:64:80:84:9a:31:61:47:e0:8e:b1:92:3a:b0: 7d:89:70:8a:cc:e7:0b:77:a0:b0:67:47:99:f9:8e: 62:d4:f3:74:6c:80:34:ad:b4:11:10:e9:6a:8a:eb: 0a:c3:42:41:db:18:32:25:57:d3:b1:eb:c5:90:a2: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DF:A2:B3:84:94:24:D6:8A:04:A6:AE:E3:87:AF:34:6A:C5:A6:38 X509v3 Authority Key Identifier: keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:26:66:ee:ac:38:85:d3:d6:75:80:18:bc:90:12:4c:5c:14: 7e:17:7a:08:54:0e:a0:13:7c:ff:6d:a9:2b:6b:1e:59:5a:02: 83:73:25:c3:ec:1d:e9:28:70:04:00:04:4c:9e:c6:06:37:e1: 69:e0:34:7d:51:37:e5:b0:d3:5d:55:68:01:09:5e:22:cd:cd: e0:a2:d4:e7:8c:a9:e6:e1:87:86:d8:36:a1:e8:f8:48:3c:51: 4e:da:fc:49:d3:71:35:1f:e9:55:ce:b8:e8:7a:ff:46:24:cf: 04:c4:19:5d:7d:6f:84:f1:d3:a9:d2:c3:8c:a5:f4:eb:d4:43: da:5d:7c:be:49:6b:20:38:84:2b:df:0a:6e:bc:a8:01:ba:c8: d9:f2:13:8c:aa:71:cd:39:7d:e1:6a:3d:d5:a0:f5:4f:14:a4: c5:e2:41:89:17:20:eb:a8:cd:59:86:28:8b:e7:1a:96:51:08: a1:b4:37:c2:6b:19:06:ba:8a:22:31:f5:cf:5c:ee:23:68:df: 2d:17:65:78:4e:b8:b9:78:94:2b:d8:c3:07:4d:2f:e4:51:99: 90:cf:8d:89:74:f8:e3:9d:05:ae:0b:2f:80:ed:c2:0a:c2:d3: 2e:9d:cb:b9:a8:a5:8a:4c:9c:ab:6f:4f:cd:e4:71:64:16:67: f0:30:cc:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGnZxQwrSNPNBRpPAKL2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5 MTE5MjgwHhcNMjUxMjI2MTAwMDQyWhcNMjUxMjI3MTAwMDQyWjAzMTEwLwYDVQQD EyhjZmRmYTJiMzg0OTQyNGQ2OGEwNGE2YWVlMzg3YWYzNDZhYzVhNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2A63BBbzxI1DkzdMa48p8YW0OZa 3bCwL+K55VUeWrH8rdgrm8NWCjci+qHoZk7XqpYPWlRba260NAgfMcKFETk/JN93 nlUrl3Eb77gnAuK9YRjgU156y0MQrHSbgemxoOAo9iPPyvSVz+9m7T9HHivhLjUo YedrEceYQtYwD/pWebCEmbKEE649uZq90xeEi3Jxwb3dEz3HfhOnZU5JjRBjxUsJ ux2/YTTKjCkhdqs6nX5abFzQHBu/e5LC9U8QZo7PDmSAhJoxYUfgjrGSOrB9iXCK zOcLd6CwZ0eZ+Y5i1PN0bIA0rbQREOlqiusKw0JB2xgyJVfTsevFkKLxowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/forOElCTWigSmruOHrzRqxaY4MB8GA1UdIwQY MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4 LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiZm7qw4 hdPWdYAYvJASTFwUfhd6CFQOoBN8/22pK2seWVoCg3Mlw+wd6ShwBAAETJ7GBjfh aeA0fVE35bDTXVVoAQleIs3N4KLU54yp5uGHhtg2oej4SDxRTtr8SdNxNR/pVc64 6Hr/RiTPBMQZXX1vhPHTqdLDjKX069RD2l18vklrIDiEK98KbryoAbrI2fITjKpx zTl94Wo91aD1TxSkxeJBiRcg66jNWYYoi+callEIobQ3wmsZBrqKIjH1z1zuI2jf LRdleE64uXiUK9jDB00v5FGZkM+NiXT4450FrgsvgO3CCsLTLp3Luailikycq29P zeRxZBZn8DDMjA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:02 2025 by rpki-client